nginx-bank.conf.j2 (1476B)
1 {% if regional_currency_nginx_tls_active %} 2 server { 3 listen 80; 4 listen [::]:80; 5 server_name bank.{{ regional_currency_domain }}; 6 return 308 https://$host$request_uri; 7 } 8 {% endif %} 9 server { 10 listen {{ '443 ssl' if regional_currency_nginx_tls_active else '80' }}; 11 listen [::]:{{ '443 ssl' if regional_currency_nginx_tls_active else '80' }}; 12 server_name bank.{{ regional_currency_domain }}; 13 {% if regional_currency_nginx_tls_active %} 14 ssl_certificate /etc/letsencrypt/live/backend.{{ regional_currency_domain }}/fullchain.pem; 15 ssl_certificate_key /etc/letsencrypt/live/backend.{{ regional_currency_domain }}/privkey.pem; 16 include /etc/letsencrypt/options-ssl-nginx.conf; 17 ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; 18 {% endif %} 19 access_log /var/log/nginx/libeufin-bank.log; 20 error_log /var/log/nginx/libeufin-bank.err; 21 proxy_read_timeout 6500s; 22 keepalive_requests 1000000; 23 keepalive_timeout 6500s; 24 25 location ~ ^/accounts/[^/]+/token$ { 26 limit_req zone=regional_currency_bank_token burst={{ regional_currency_bank_token_burst }} nodelay; 27 include /etc/nginx/snippets/regional-currency-bank-proxy.conf; 28 } 29 30 location ~ ^/accounts/[^/]+/challenge/[^/]+(?:/confirm)?$ { 31 limit_req zone=regional_currency_bank_challenge burst={{ regional_currency_bank_challenge_burst }} nodelay; 32 include /etc/nginx/snippets/regional-currency-bank-proxy.conf; 33 } 34 35 location / { 36 include /etc/nginx/snippets/regional-currency-bank-proxy.conf; 37 } 38 }